Two-factor authentication (2FA)

Two-factor authentication requires a second element alongside the password at login, most often a one-time code from an app on your phone. Even if an attacker gets the password, they cannot get in without that code.

It is one of the most effective and cheapest safeguards: enabling 2FA on the administrator account blocks the vast majority of account-takeover attempts by guessing or stealing passwords.